Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/089FA376B3D911F092D843C3DAE4EC9C.roa
File: 089FA376B3D911F092D843C3DAE4EC9C.roa (raw, json)
Hash identifier: 6W/4CXWBMrzJlIifkrfDgmQW4fuO+SoIEtsjPzduHio=
Subject key identifier: FE:7C:A4:FE:5A:5D:A5:9C:27:D2:AC:DA:1A:C5:DE:9D:E0:0E:9D:18
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018359
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/089FA376B3D911F092D843C3DAE4EC9C.roa
Signing time: Tue 28 Oct 2025 08:35:19 +0000
ROA not before: Tue 28 Oct 2025 08:35:12 +0000
ROA not after: Tue 02 Dec 2025 08:35:12 +0000
asID: 62513
IP address blocks: 156.225.32.0/21 maxlen: 24
156.225.40.0/24 maxlen: 24
156.225.43.0/24 maxlen: 24
156.225.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99161 (0x18359)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 28 08:35:12 2025 GMT
Not After : Dec 2 08:35:12 2025 GMT
Subject: CN=69008046-90cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:31:d6:a1:c6:07:f7:29:3d:d5:b0:7c:cf:b9:
5b:16:91:f7:f1:6a:46:87:96:81:51:9b:cb:38:14:
a2:a4:96:ff:07:3a:9f:dd:e5:c0:6d:75:10:35:07:
28:82:18:f6:37:0c:3f:14:f3:e6:c3:89:5f:f5:52:
60:94:cd:d7:7e:05:a0:f8:ce:73:79:4e:2c:2a:f0:
ee:44:73:11:ad:4f:f3:45:f1:ff:f8:b2:9e:b1:50:
9b:a1:1b:8f:39:80:98:23:bc:7b:ec:af:b8:1a:5d:
67:cc:bd:63:a4:7c:36:d1:ce:c5:14:9f:e1:d7:88:
bf:91:f4:fc:98:62:0a:75:d7:b5:15:ae:66:24:87:
4d:83:e8:bd:93:20:fa:fa:58:a4:22:1c:52:64:9d:
ac:b4:b3:88:6c:e6:af:f8:1a:65:33:6e:49:2e:28:
b6:43:bd:36:f3:1c:15:62:33:ce:8d:9d:e0:f5:00:
52:09:0d:5b:19:c6:c9:1b:f0:aa:51:8f:4a:f8:bc:
26:40:68:f0:0d:9b:30:63:0a:63:f0:d1:0b:74:08:
44:8e:ee:92:49:e6:a0:e6:72:58:5e:3c:5a:b7:eb:
c3:a1:a1:7c:4a:20:2c:fe:e4:8e:d5:32:ea:b6:92:
2c:39:a5:d4:d5:d7:3c:13:42:b9:02:2d:7f:b4:b1:
6e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7C:A4:FE:5A:5D:A5:9C:27:D2:AC:DA:1A:C5:DE:9D:E0:0E:9D:18
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/089FA376B3D911F092D843C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.32.0-156.225.40.255
156.225.43.0-156.225.44.255
Signature Algorithm: sha256WithRSAEncryption
b6:41:77:17:74:e2:6a:75:85:d0:b7:f4:0e:62:b2:d8:18:77:
a1:db:66:39:5a:b3:99:61:fa:40:ce:51:d4:01:c6:e1:c5:51:
41:d2:e5:18:ce:82:1a:4e:a2:9f:0c:3b:7b:4d:46:d8:2f:e7:
41:c5:80:f7:60:66:e3:14:68:33:93:0c:28:b4:1a:56:0c:80:
80:45:04:1e:65:54:b8:7f:0e:96:7d:9e:3a:71:b5:31:37:be:
6d:dc:20:f7:0d:6b:b0:68:de:77:52:70:f7:80:52:40:be:ba:
36:40:1d:1d:b2:2e:66:71:f0:ab:1d:d3:de:91:53:34:8a:7d:
29:c0:5a:6b:a1:2b:a1:a2:b6:9d:52:fc:c9:67:c9:ec:c0:b7:
b4:be:64:19:2a:8f:0b:ea:29:9f:82:34:46:53:d8:41:0b:d8:
30:49:e1:c6:9b:ae:f5:9e:66:a7:26:23:a0:9d:35:8b:22:f9:
aa:11:fc:0e:18:95:48:ad:75:08:eb:a8:36:49:dd:9d:0e:39:
16:c3:24:a2:5d:7b:5c:19:6b:f9:eb:03:f7:75:9d:56:24:9e:
84:49:78:97:93:d8:0b:b1:71:d3:1b:51:3e:3b:80:99:63:e0:
6e:4a:5d:f3:36:26:19:1f:4d:f7:0d:f0:21:b9:0a:3d:3e:2f:
db:09:d6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:48 2025 by rpki-client